What’s Vulnerable › Vulnerabilities

CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release()

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-07-19 · updated 2026-10-13
• Weakness: CWE-416

Description

In the Linux kernel, the following vulnerability has been resolved: nfc: llcp: Fix use-after-free in llcp_sock_release() llcp_sock_release() unconditionally unlinks the socket from the local sockets list. However, if the socket is still in connecting state, it is on the connecting list. Fix this by checking the socket state and unlinking from the correct list.

Affected products

• Linux kernel: from 3.10.10 before 5.10.259; from 5.11 before 5.15.210; from 5.16 before 6.1.176; from 6.2 before 6.6.143; from 6.7 before 6.12.93; from 6.13 before 6.18.35 — fixed in 5.10.259, 5.15.210, 6.1.176, 6.12.93, 6.18.35, 6.6.143

How to fix

Upgrade to a fixed version: Linux kernel 5.10.259, 5.15.210, 6.1.176, 6.12.93. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/2dfdaaf7d933b676124aadec6698825e95f94fe9
• https://git.kernel.org/stable/c/89ba026747019ee643d29407435ddc118e6ca908
• https://git.kernel.org/stable/c/912ebc49d4406a17fe73e5671d674fbc2f6b2634
• https://git.kernel.org/stable/c/bc421d0826dedbba37580a25405eafb599e76d42
• https://git.kernel.org/stable/c/cdc17e09a636c7f936f771902535a7515a7608fc
• https://git.kernel.org/stable/c/e00f50f8697724a6f1d2d35744c1332c9912dac5
• https://git.kernel.org/stable/c/f4268b466190dae95a7585f69b4f1f8ad097632c
• https://git.kernel.org/stable/c/fb29f6bbe433f3decad227588809636c25f2a287

Get alerted when CVE-2026-64011 or the next vulnerability affects your stack